Enhancements to CloudWatch Pipelines include a 'keep original' option that stores raw logs prior to transformation, addressing audit and regulatory needs by preserving unaltered data. Processed logs now contain metadata marking them as transformed to differentiate them easily during investigations.
Additionally, new IAM condition keys restrict pipeline creation based on log source and type, granting administrators detailed control over who can manage pipelines. These governance features are provided without extra cost, though standard storage fees apply for kept originals, and are available across all CloudWatch Pipelines-supported regions.
Source & further reading
Amazon CloudWatch pipelines introduces new compliance and governance capabilities ↗Source published 2026-04-10. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.